If SHA1 signatures are not permitted, try to fallback to SHA2
    
    SHA1 is insecure now, and is forbidden in RHEL and will be forbidden in
    several crypto-policies in Fedora in some future. This patch adds
    detection of SHA1 signatures availability and, if not available,
    enforces fallback to SHA2.