What about just ignoring package signatures?

https://github.com/basecamp/omarchy/blob/master/default/pacm...