Is it not already happening? https://jsr.io/docs/trust