Putting the creds in another file didn't hide them anyway.
Fix the GPG key path.
Clear the package cache too, since fpm won't overwrite when doing a rebuild.
Set --no-public on uploads.
Pull in my patches to libcloud and depot from master.