Mainly for supply chain security. We have a PoC for cryptographically hashing builds, we should support client signatures for builds as well.