8.0 packaging debian sign aab

can't use `os.getenv('GPGPASSPHRASE').strip()` ?