should support verifying signature on tree to build

bzr builddeb supports building from remote branches, e.g. over http. It would be nice if it would be possible to require signatures on remote trees that are built to detect MITM attacks.

Similarly, it would be nice to see if a remote tree that has been cloned locally was created by somebody trusted by the current user - building a package involves running scripts on the local machine.