SIGNATURE: Signing and verifying packages

• OpenPGP clear-signed manifest with SHA1 digests
• Supported by Module::Signature, CPANPLUS and Module::Build