use gnupg home for final signing ops