when configure with --disable-gpg, no message complain about the signature stuff.