Sign and validate signatures of rustup-setup

[brson]

We need to sign rustup-setup and validate them on self-update. Probably we can create a new subkey of the existing signing key and give the secrets to travis and appveyor.

This should use the same crypto as we use for rust builds.