sign remote Whonix repository with old and new key during transition period
added "set -o pipefail", not required for now, just in case
fix