* Replace curl single char options with their verbose counterpart * Stricter check for tarballHash
closes #18132 added GPG verify for binaries co-authored-by: bboot <bboot@cisco.com>