I think I’ll give GPG, signed commits, and signed release tarballs another chance. 🤔 Let’s see how big of a headache this is going to be …