gpg keys: new signatures