fix bug where sysmerge would always try to verify signatures