Re: [opensuse-packaging] [RFC] gpg-upstream-keys: Build time source GPG signature verification