RFC: Fedora signing server design