This has nothing to do with technical capability. It would never be allowed for other reasons. The default kernel key is a no go, and legal once said we would not be a CA for keys for other bits. We could try again and see what they said, but I am guessing that even if the answer changed, nova would be ready before the details are worked out.
I was certainly not suggesting that you do that work for free. I was simply stating that the capability has been there all along if any 3rd party repository was interested. No one is stopping a 3rd party repository from doing this. But this isn’t new information, it seems to get rehashed every few years.