Code review comment for lp://staging/~xnox/simplestreams/sensible-default-keyring

We could default to that too. But an exact rsync mirror of cloud-images.ubuntu.com on the internal network, will still be signed with the same key, as long as it is not modified.

That's how our mirror networks work.... if you mirror it exactly, all signatures remain valid.