Hi Andy,
You are correct that those are alternative options. You actually had
your key correctly added to the KEYS file. I believe the issue is that
your key is only self-signed, so it cannot be verified through
Andrew's web of trust. See key signing party instructions at:
https://infra.apache.org
As Andrew notes in the current VOTE thread for DataFusion 8.0.0-rc2, there
is an issue with the key I used to sign the release:
gpg: Good signature from "Andy Grove " [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature