When receiving, allow the specification of the pubkey to use to verify the signature of the package