Default to built-in root topology if signature check fails (instead of exiting)