local config for signing key
do our best to always sign commits even though that's a bad idea