How many of you sign (GPG) your code on git or mercurial? whats the best way to sign mercurial repo? commitsigs or GpgExtension?