Add checksum verification for gpg .sig files.