correct signing key use for rpms
shift tcl builddep to always required - mock env here seems to demand it...