- drop the support for deprecated cbinstall and cbpreinstall directives
- Abort when the server is not answering with 200 or 404 when downloading _pubkey files
- really use the internal rpm signature check