adding keybase gpg signing info, since I assert the Dockerfiles are safe