change GPG-KEY url
add cdh roles