--gpg= etc. @gpg should be in manual
should pass @gpg to debsign

approach for remote signing
  - initiator acts as oracle for responder
  - one of each operation
  - debsign: copy up changes and dsc, run debsign on initiator, copy down
  - git tag: generate tag contents on initiator

protocol:
  - responder sends parsed changelog
  - responder sends changelog
  - responder sends dsc
  - responder sends head commit hash