wouldn't it be nice if you could cross sign mac packages with multiple signatures, so you only had to trust 3/5 or something like that