Signature verification was disabled as a default parameters to make it easier
for people to build the project on other distros. But this can be dangerous
as users may start using a built swupd without signature checking to
install a CL distro.
Signed-off-by: Otavio Pontes <otavio.pontes@intel.com>