global USE flag
verify-sig

Verify upstream signatures on distfiles