# upstream does not GPG sign tarballs at this time
chirp source: debian-watch-may-check-gpg-signature
