added a bit to pkg and more strict signature validation, will start on resman