Yeah, they're a bit strict. A possible solution is to ask for 'user.signingkey' in the config file and, if exists, expect a "good (G)" signature, but always war

Yeah, they're a bit strict. A possible solution is to ask for 'user.signingkey' in the config file and, if exists, expect a "good (G)" signature, but always warn about any other other unexpected state different than "good (G)" and "no signature (N)". Thanks rurban!