Add support to validate a signature

This doesn't mean that we can already validate a package.