# upstream does not sign tarballs
bdist-nsi source: debian-watch-may-check-gpg-signature
