Application Security: consider PGP signed releases

*typo “considered trusted

also: bump