In order to upload artifacts into the Sonatype OSSRH, they have to be signed with GPG. We should add this to our build in a "release" profile.

See http://central.sonatype.org/pages/apache-maven.html#gpg-signed-components