We have a policy for our QA to sign release candidate tags. It's purely for non repudiation reasons. That's the sole purpose to keep verification on validity of the commit chain.