verify signature after build