My repository needs gpg signing for tagging and commits.

My job uses the git plugin to checkout. Despite my `git config --list` looking like:

user.name=j...t
user.email=J...M
user.signingkey=0...6
commit.gpgsign=true
tag.gpgsign=true

the plugin's "Create a tag with every build" runs the command:

git tag -a -f -m Jenkins Build #51 jenkins-test-git-tagging-51

it does not contain the sign option nor does it respect my gitconfig "tag.gpgsign". I know this, because when I use the git publisher to push the tag, my repository rejects with:

hudson.plugins.git.GitException: Command "git push https://... .git jenkins-test-git-tagging-51" returned status code 1:
stdout: 
stderr: remote: Signed commits and tags are enforced for this repository.
remote: jenkins-test-git-tagging-51 was not signed.
To https://... .git
! remote rejected jenkins-test-git-tagging-51 -> jenkins-test-git-tagging-51 (pre-receive hook declined)

I would like a way via the plugin to gpg sign tags and commits.