[master 2/2] Actually verify downloaded packages