[Fedora-packaging] Re: Using Minisign for source file verification