I have imported several rpms into our koji without realizing that they
were unsigned. I'd like to sign them with our gpg key, but I can't
figure out how to do that after the fact. We use the signing plugin from
, but that only works for rpms
we build ourselves.