As requested in !1 (comment 155592) I have enabled Salsa CI support, and as agreed elsewhere I've updated the gbp configuration to ensure that everything coming from upstream is signed.
The CI actually spotted an issue related to hardening, which I've also addressed.
Note that I'm currently trying to make a new libvirt-dbus release happen upstream and that will hopefully not take too long, so I would not be releasing 1.3.0-3 with these changes but rather roll them directly into 1.4.0-1.
@agx looking for your blessing before merging, as usual :)