signing public keyring for devuan packages