CHEF-3938: don't disable gpg checks in zypper commands

The zypper package provider should check the gpg signature of packages by default. Doing otherwise is a security hazard. This should be configurable.