Download the PGP signature and add a verify target Approved by: Simon Dick <simond@irrelevant.org> (maintainer)