Hey, I could have googled this but don't have the time for that right now: Has any thought been given, maybe even some hooks implemented, to allow code-signing of applications, which would presumable be done in the post-destroot?