(ITS#5639) Digital (PGP-)signature for downloadable sources