Re: [opensuse-factory] build time verification of GPG signatures