npm should be in the path already
add gpg signing stuff
loading order
ignore gpg keys