Hard-code trustworthy signers

[epiccurious]

Current method for PGP key verification is vulnerable to a sybil attack.

Instead of importing all sigs, hard-code a list of trustworthy devs.

[epiccurious]

Thanks @BenWestgate for the suggestion.