Does anyone have good input on how to do proper package signing with #gpg ?

Here's what I have so far:
https://code.vinyl-cache.org/vinyl-cache/pkg-vinyl-cache/issues/192#issuecomment-61151