work around lack of bintray debian repo signing, depend on chef-client