Couldn’t you just solve this by requiring submissions to be signed with a key signed by another chosen trusted authority. This authority could either be the maintainer, or somewhere else which charges a nominal fee for a certificate.