This adds check_signatures config support, triams back the transport api to be leaner and easier to hook in suffixes - non primary streams in the store associated with the fileid that primary data is stored in, a gpg module which will encapsulate all signing and checking operations.