For nm.debian.org, at 2021-01-05: For the past 7 months, I've sponsored the package setzer (versions 0.2.5-1, 0.3.1-1 and 0.3.4-1), which were prepared by Stephan Lachnit. For this past work, Stephan Lachnit sent mails using the email address stephanlachnit@protonmail.com which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint BB45 B0B3 FF56 1BDB D45E E8A9 B35B 49EA 5D56 3EFE. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Stephan Lachnit as they present themselves on nm.debian.org is the rightful owner of both email stephanlachnit@protonmail.com and GPG key BB45 B0B3 FF56 1BDB D45E E8A9 B35B 49EA 5D56 3EFE.