Split from #4232 (closed) because it's unrelated from the implementation of commit signing.
cc: @muneebali @eliran.mesika @punkeel @judecn