Would be nice if you could also use a timestamping service when signing your commit. That way even if your key is compromised you can still spot things that wer

Would be nice if you could also use a timestamping service when signing your commit. That way even if your key is compromised you can still spot things that were signed after the compromise.