remove key sig checking when building packages