Verify sources with GPG signature. Strip out old build rules. Fix CVE-2021-3541 as part of the update to 2.9.12.
- separate a -static package Daniel