--timestamp=none is generally not a good ID as your signature gets invalid when its signing certificate validity expires! You will not recognize any issue with the signed binary until the end of the validity of the certificate.

Any news on that issue?