-Vcs-Dgit-Master: <commit>
- specifies commit hash corresponding to the thing uploaded
- optional commit hash corresponding to pristine tar??
+--gpg= etc. @gpg should be in manual
+should pass @gpg to debsign
+approach for remote signing
+ - initiator acts as oracle for responder
+ - one of each operation
+ - debsign: copy up changes and dsc, run debsign on initiator, copy down
+ - git tag: generate tag contents on initiator
+
+protocol:
+ - responder sends parsed changelog
+ - responder sends changelog
+ - responder sends dsc
+ - responder sends head commit hash