Delete package sources that fail the signature check.