Package signing has been around for a while now but the latest image (12-Dec-2016 of rpi2) does not have it enabled (pacman.config sill has SigLevel = Never and no archlinuxarm-keyring package or generated keyring). Is this something that can be added to the next round of images? I'm betting many users are unaware of the feature.