PyPI already has this. It was a little bit annoying when they imposed stricter security on maintainers, but I can see the need.