If only there had been PGP signatures. Oh wait ...
Maybe they'll implement PGoogleP, where your private key is safely and securely stored on Google's servers