- allow multiple signing keys to be added
- re-verify all binaries when signing keys change
- pull-through registry
- allow scaling to multiple instances