working on gpg package signing