cot: signature verification settings

This also removes the untrusted zip flash prompt, as users
really should explicitly enable untrusted zip flashing.