Notes on bringing signature verification to OPAM, the Ocaml Package Manager