make package gpgcheck flag configurable

package gpg checks should be on by default