Packages can be and generally are signed and verified.