download llvm-snapshot.gpg.key to verify packages