Fix how we do package repo signing, need to use the *specific* version of pkgng that is in that
repo