We've started Using TKey-backed SSH for Git tag signatures