It verifies things signed by a private key. It is not new to 4.0 -- we just forgot to include it in the 3.9 & earlier 4.0 installers since we changed computers the installers were generated on.