bootstrap: trust ppz repo sigs