gpg: signing docs