bad, unknown, and missing signatures with apt