reference GPG key from repo file