Just give us the ability to manually whitelist external developers signing keys. That way you can choose to only install apple signed apps (the current situatio

Just give us the ability to manually whitelist external developers signing keys. That way you can choose to only install apple signed apps (the current situation which would become the default of the new system) or to accept apple signed apps + selected devs applications (which is currently impossible). It already works on OSX.