Sequester GPG signing in a separate profile.