#github doesn't have these
fwupd source: debian-watch-does-not-check-gpg-signature