$ 0 0 One possibility is to keep a development key in the repository, and sign official releases with a key that isn't in the repository.