Packages with the verify-sig use flag

Global definition: Verify upstream signatures on distfiles.