dgit rpush ought to work fairly well for the stuations where debrsign might be used, and does not have this ssh trust reversal problem.
(It still operates rather as a signing oracle but the signing oracle is much more restricted.) Ian. -- Ian Jackson <ijack...@chiark.greenend.org.uk> These opinions are my own. If I emailed you from an address @fyvzl.net or @evade.org.uk, that is a private address which bypasses my fierce spamfilter.