This is a stub for upcoming functionality, and is not fully documented.
The gpg stanza contains signature information for GPG-signed distributions. The form is:
gpg <signature>, <parameter>: <value>where <parameter> is one of key_id or key_url, and <signature> points to the detached signature of the distribution. Commonly, the signature follows the url value. Example: libreoffice.rb.