# maintainer is verifying upstream signatures on git tags debian-watch-may-check-gpg-signature