add function to find packages with no signature key association