Always enforce the metadata signature has a valid timestamp
Always enforce the metadata signature has a valid timestamp

Although this is something that we have always done on the LVFS, corporate
deployments that resign the firmware or metadata might not be signing the files
in the same way.

Always require a timestamp to prevent allowing an inadvertent rollback attack.

fwupd/fwupd,hughsie/fwupd,fwupd/fwupd,hughsie/fwupd,fwupd/fwupd,hughsie/fwupd,hughsie/fwupd,fwupd/fwupd