verify db gpg signatures before updating the db