Strong signing Sigil; key's public so anyone can build, trust established by Nuget for now