Both SOURCE_HASH and SOURCE_GPG work like a charm.
No needs for uselessly changing HASH to GPG.
Of course if you update VERSION you can change HASH to GPG (it is
pleasant if you just comment SOURCE_HASH, no remove it), moreover no
needs to mention it in HISTORY.
I know, nitpicking. :-)