Verify image on update
Verify image was signed with the correct key before update.