The government clearly can't be trusted either. They said they didn't collect information on millions of Americans, which was an outright lie ("least untruthful

The government clearly can't be trusted either. They said they didn't collect information on millions of Americans, which was an outright lie ("least untruthful" statements are still lies). In another comment I proposed a solution where there is a shared, recorded pair programming session where the actual commands to be executed are approved by each side before execution. What I don't know is if such a session could be set up without giving exposing your keys to the system capable of handling the shared session.