verify signature hook

How do I complain when a commit/merge/tag/etc aren't signed? Ie,
everything should be signed and I'd like a hook that complains loudly
if something isn't signed (or if a signature isn't verifiable).

Also, how do I default to signing everything?