This makes the secrecy aspect problematic. You can't have zero trust in authority, verifiability and resistance to sabotage all at once.