Alternative feature for `rpmsign --addverity`

See the Fedora proposal:
https://fedoraproject.org/wiki/Changes/FsVerityRPM

I'm not sure about the client/server protocol change.  A per-file checksums will have to be sent (but I'm not sure if only top-level hash needs to be sent, or the whole hash tree).

See also #29.