Add some verification logic for dockerize

Since we download the binary each time, we should make sure that it's
trustable. Since there is no signatur by the developer, we do the
cheaper version of simply using a sha256sum.