publishing foo
fix in to filesystem, it checks if the target file is
there and prints an appropriate message

Signing a pubkey with another signature is a bad idea,
to make this work i had to refine the data model