fixes #1123: mirrors can get credentials using gpg