Reproducible builds, signing keys, and binary repos