The signing event branches could be protected from force-pushes etc -- on the other hand I don't see major dangers there. Let's consider branch protections for `"sign/*"`