Debian package signature verification tool