@TheVault, while it's good that it is signed, you should have sha1 sums or even md5 sums of the installation package. Maybe include all the usual hash functions, crc32, md5, sha1, sha-256. The geeks will now how to verify that.