https://snott.net/linux/pacman-4-arrives-with-package-signing/