Currently, users are able to create "verified" commit signatures for
emails they don't control.

Changelog: security