[Bug 468750] apt doesn't properly check for signed packages