=item B<DsvCertificateTree>: <directory>

Applies to B<execute>.

B<DsvCertificateTree> is optional.  This control specifies a directory
that contains one or more PEM-encoded certificates whose public keys
may be used to verify the payload's signature -- invalid and
non-PEM-encoded files are silently ignored.  Each certificate in the
certificate tree is used, in turn, to verify the payload's integrity.
The verification process does not stop until a match is found or all
certificates have been tried.  Note that B<WebJob> will not search for
certificates in sub-directories of the specified tree.  This control
is ignored if B<DsvVerifySignature> is disabled.

For more information on signing and verifying payloads refer to the
B<WebJob-DsvTool> man page (i.e., C<webjob-dsvtool(1)>).  That document
also provides examples of how to create the necessary PEM-encoded keys
and certificates.

Note: If B<DsvCertificateTree> does not exist or does not contain at
least one valid certificate, the program will abort.

Note: Digital Signature Verification (DSV) support is a compile-time
option, which is enabled by default.  However, if DSV support is not
compiled into the binary, WebJob will abort with an error if you try
to use this (or any) DSV control in the config file.  To determine if
DSV support is compiled into the binary, run the following command:

    webjob --version

