2. verify digital signatures on returned XML documents.

Do you mean something like xmlsec? I don't think there's a Perl wrapper for this C library yet, but you could write one using XS or SWIG.