[arch-general] unoffical package signing