added signing key for packages