gpg: enable signature checking