make package gpg checks configurable and set default to true