Security - signing code

[ingig]

plang should be signed at build time. The runtime should not run unsigned or invalid signed .pr files unless specifically told to