freeipmi: check source tarball with GPG signature