Given an X.500 DN and a key pair, warrants, descriptors, JARs, and so on, can be signed. This prevents tampering.
