1 --gpg= etc. @gpg should be in manual
2 should pass @gpg to debsign
4 approach for remote signing
5 - initiator acts as oracle for responder
6 - one of each operation
7 - debsign: copy up changes and dsc, run debsign on initiator, copy down
8 - git tag: generate tag contents on initiator
11 - responder sends parsed changelog
12 - responder sends changelog
14 - responder sends head commit hash