run gpg only on release