rolled back version - gpg artifact signing hooked in release