Bad PGP signature

CC @LukasReschke I’ve also been wondering about this actually.