GPG package signing support