switch to distro pkgs the upstream repo keys give bad sig atm