> Then use a SHA256-based repo, and use the cheaper signing scheme.

The scheme you just called a "screw up"?