backports: add signature verification code