Image signing and content trust