Encourage people to run `go get -d ...` and check sigs before building

[psivesely]

You should encourage users to check the sigs on your git tags/commits before building Pond.

As a side note, Pond builds on Fedora 21. You can update to say this on your website.

I would make a pull for this, but I don't think your site is git based. Or at least I don't see a public repo.

[leif]

The website https://pond.imperialviolet.org/ is in git at https://github.com/agl/pond/tree/master/doc