Patch Set 1:

We can't sign tags in JGit because the only PGP implementation available in Java is BouncyCastle, which is forbidden for use by Eclipse projects.

We'll have to fork out to sign tags, which means we'll have to be dependent upon a user-supplied external program that is most likely going to need to be the GPL'd GnuPG program.  Yay.