Attempt to disable publishSigned for unpublished projects

This requires re-ordering the PGP plugin in autoSettings.

This patch does not work. Not sure why.