add signature verification, gemspec, callback block