Comment 19 for bug 1780442

Per discussion upstream there is a commit needed for fwupd as well to make it not abort on the bad data. So the appstream-glib tasks should get a verification-done tag and flow through, but we also need to SRU fwupd with this commit: https://github.com/hughsie/fwupd/commit/fe1c4de5a4b178cae3e4e9325ea84ff85c4b1be3