using gpg key from our own github repo now.

at least github has https :|