switched to new package signing key