Verified commits: sign your Git commits and avoid impersonation risk

That's useful in certain cases but in most cases within an organisation git repos are already (hopefully!) protected by access control.