[arch-general] gpg source validation for kernel.org style signatures