GPGChecks will allow upgrades from packages not signed