GPG signing with Software Trust Manager