This way all the packages are verified, not only those installed in installer image (by lorax). This makes manual rpm --checksig redundant.
Based on fc20 package. Detailed changelog included in spec file.
Details here: https://bugzilla.redhat.com/show_bug.cgi?id=904654 When above bug will be resolved, this commit can be reverted.