add initial signature verifier

(only removes signature, does not actually verify)

[#74966414]

Signed-off-by: Johannes Petzold <jpetzold@pivotallabs.com>