Comment by rlpb

Signing an unsigned apt repository is about three gpg commands though. I don't see how this kind of thing requires a whole separate product.