merge: add config option for verifySignatures