Change pom.xml to correct signature verification