detached signature can now be verified from the gpg module