@kohsuke prefers that the option to disable signature checks not even be...

@kohsuke prefers that the option to disable signature checks not even be presented unless -Dhudson.model.DownloadService.noSignatureCheck is used.
(cherry picked from commit 54c85007)

core/src/main/java/hudson/model/DownloadService.java

@@ -346,7 +346,7 @@ public class DownloadService extends PageDecorator {
 
     public static boolean neverUpdate = Boolean.getBoolean(DownloadService.class.getName()+".never");
 
-    /** @deprecated Use {@link DownloadSettings#setIgnoreSignature} instead. */
+    /** Now used only to set default value of, and enable UI switching of, {@link DownloadSettings#setIgnoreSignature}. */
     public static boolean signatureCheck = !Boolean.getBoolean(DownloadService.class.getName()+".noSignatureCheck");
 }
 

core/src/main/resources/jenkins/security/DownloadSettings/config.groovy

@@ -6,7 +6,9 @@ f.section(title: _("Download Preferences")) {
     f.entry(title: _("Use Browser"), field: "useBrowser") {
         f.checkbox()
     }
-    f.entry(title: _("Check Signatures"), field: "checkSignature") {
-        f.checkbox()
+    if (!instance.checkSignature || !hudson.model.DownloadService.signatureCheck) { // do not display this option by default
+        f.entry(title: _("Check Signatures"), field: "checkSignature") {
+            f.checkbox()
+        }
     }
 }