make gpg signing optional for build success