grozin@gentoo.org Use app-crypt/gpgme to verify signatures