gpg sign at install