Signs jar files with gpg only when we make a release.