RPM Signing and Verification with GnuPG