Use new key for signing tags and/or commits

[dvzrv]

Hi! I'm packaging chromaprint for Arch Linux.

@lalinsky would it be possible to create a new key, sign that with your current to create a chain of trust, revoke your current and from then on sign with your new one? You are currently using a 1024bit DSA key. That algorithm is cryptographically broken.
I would like to be able to use the signed tag/commit for source verification.

Thanks! :)