users can override package for GPG