TODO: need to re-create gpg so I can sign jars to clojars