Require pacman signature checking. CMA is broken on newer kernels, disable it.