embed secure hashes (SHA1) and digital signatures (GNU Privacy Guard) into files
https://packages.debian.org/jessie/bsign