See https://pagure.io/releng/issue/9908
The existing fedora keys are using sha-1, would be nice to have some way to move them to sha-256.
Note to self on how to accomplish this on the CLI:
gpg --expert -u <keyid> --sign-key <same-keyid> (Ignore the warning that it's silly)
gpg --expert -u <keyid> --sign-key <same-keyid>
Then gpg --edit-key <keyid>; clean
gpg --edit-key <keyid>; clean