B.3.6.4 Extension for Signed Packages are Mandotory
Instruction for the need that a solution package must be signed:
Use an attribute “UnsignedPackagesAllowed” and set value to “FALSE”.
Implement recommended security settings and behaviour that only an admin or security expert can change this setting