Instruction for the need that a solution package must be signed:

1. Use an attribute “UnsignedPackagesAllowed” and set value to “FALSE”.
2. Implement recommended security settings and behaviour that only an admin or security expert can change this setting