If it's possible for the user to use their own key then GPLv3 may permit you to ship signed code without the signing key - the user will just be able to sign mo

If it's possible for the user to use their own key then GPLv3 may permit you to ship signed code without the signing key - the user will just be able to sign modified versions themselves. Microsoft's current requirements include the ability for users to install their own keys.