adds release profile which controls the gpg signing requirements, fixes