allow multiple signing keys to be added re-verify all binaries when signing keys change pull-through registry allow scaling to multiple instances