I Nostr-sign my commits and releases, now. It's really easy to do, but I wonder if it will catch on.