we store the result of the gpg commit verification in the db because the
gpg verification is an expensive operation.