wouldn't this just shift the trust from the police email address to the police email PGP signer? wouldn't hackers then just target that part of the infrastructure?