setting up gpg to only sign on release