I was also reminded today that Leopard already has (optional) signing as part of the new installer stuff. iPhone might be based off of that.