We're not signing the nightly debs - the only signing happens when we build the apt repo. The .deb files downloadable from /nightlies should be signed also.