How do Grapheneos devs manage the private keys that are used to sign updates and releases? Who has accses to them?
Could a single person sign an update? Could those keys be stolen? I'm not saying i don't trust the devs, i'm just curious how to handle such sensitive data securely.