Widgetsignatue

Process signature file in widget according to http://www.w3.org/TR/widgets-digsig/#signature-verification. Because there is no Tizen CA root in image, reference validation and signature validation on signature will be added when CA is ready.
why create std::set on heap?