http://www.sonatype.com/people/2010/01/how-to-generate-pgp-signatures-with-maven/