Add preliminary support for package scripts that have a PGP signature instead of a Harpy certificate.