[Bug 1199184] New: switch Tumbleweed to a 4096bit RSA signing key