[pacman-dev] Checking whether a package was signed