add signing key for debian/watch