I've only ever used my PGP key for two purposes:

- to sign tags in Git for open source projects that I maintain

- to sign custom packages I build (and host) for Arch Linux