check for existence of verification pubkey before trying to validate the signature