Add tarballs and validation.pem to .gitignore