IIRC it boils down to a new Merkle root and a self-hosted server instance that uses it. Add snapshot pushing to the blockchain and you've got yourself an independent Keybase instance with a fresh and clean database ready to be filled with employees.

I wonder what the identity proof adding would look like. I guess corporations are not interested in public proofs from Twitter.