The gpgcheck option should be used to ensure that checking of an RPM package's signature always occurs prior to its installation.