Story #2755: Implement Keep permission signatures in API server and Python SDK
Review master... b12f667This change implements:
- A new configuration setting
Collections.createnow verifies any signed locator found in a manifest. The signatures are removed from the manifest before storing it in the database or computing the collection UUID.
Collections.showsigns all locators in the manifest before returning it to the client.