gpg signing is annoying : runs on even a local install