PGP signature bug (oops)