verifyuploads.sh checks APP_VERIFY_SERIES and not global key