FYI: Clojars now supports ssh-signed artifacts (SSH signing was released in lein 2.10.0; I don't know the status of other deploy tooling)