Actually, still do the check and log wrong signatures, just don't let it stop binding to the package