--gpg= etc. @gpg should be in manual
should pass @gpg to debsign