This came up in blocker bug meeting discussion today. We really should check that all packages are signed after a default install. Signed-off-by: Adam Williamson <awilliam@redhat.com>
