[opensuse-security] repomd.xml from buildservice security repo has invalid signature