Fedora GPG signing/verifying question