[opensuse-security] RPM signature verification