add options to verify hashes and signatures

[max-mapper]

e.g. you should be able to give it a hash, and hash type (maybe a multihash) for a url. or a public key and a signature type