note about pgp key verification in build script