Support signature validation for remote metadata sources