Comment 3 for bug 906057

I would prefer repozo -R to do the checksum verification during recovery (unless you ask for --quick recovery).

But then I looked at the code and it seemed simpler to implement a standalone --verify, at least as a first step.