As Craig pointed out, we need to sign our releases. I will act as
release manager for this first release and do the necessary things.
I have now generated and checked in the KEYS file in the root directory
of the repository. The apache guidelines suggest that all committers add
their keys to this file. To do so, please follow the instructions in the
beginning of this file. You will need 'gpg' or 'pgp' installed on your
system to do this.
Folks at Sun: please contact me for access to a system on which I've
installed gpg.
Shanti