First WIP to verify signatures from a dist-file.

WIP to add signature validation (and signing of dist files).

Thoughts?