add option to validate signature during import