committer: suggest getting a PGP key for release and code signing