Ditching OpenPGP, a new approach to signing APT repositories