Install debs from sources.list. Confirm the source with the trusted=yes line from Setup, then switch on signature checks.