Trusted verification once moved to nodejs/

[rvagg]

Nothing personal obviously @canterberry, but this'll need an audit by a TSC member or someone with a trust relationship to the TSC if/once it's moved, to make sure the keys are as they should be.

Flagging that now in this issue which can be closed once it's all done.

[canterberry]

Of course, and thanks for calling that out. Don't take my word for it: trust, but verify!