Add ability to verify checksums against an sha512 checksum in the
package descriptor.

This allows maintainers to provide checksum verification for
distributions that do not supply checksum information.