solv example: use gpgv instead of gpg to verify sigs