add actual signature validation

[#75375442]

Signed-off-by: Johannes Petzold <jpetzold@pivotallabs.com>