added gpg signing