Has anyone explored using Nostr IDs in place of PGP, e.g. for signing arbitrary things: software binaries, git commits, etc?