we have a key and sign some stuff. just had no time yet to sign the tarballs :(