added signing of packages and renamed valid properties to verified (simetrical with verify function name)
removed passcode from signing options (ssh will prompt)
add signedBy property to signature
wip: signing/verification