Update: .repo files now have gpgcheck enabled