add trusted key store

Rather than duping the docstring with keystore.CheckSignature, just say `CheckSignature is a convenience method for creating a Keystore with a default configuration and invoking CheckSignature`