skip gpg unless explicitly enabled via -Dgpg.skip=false