The source project of this merge request has been removed.
store signify public key locally
fetching it over http every time kinda defeats the purpose.
upstream currently refuses to implement https, so this is mostly a waste of time either way.