Have each outgoing maintainer sign a string "I approve <new maintainer> whose public gpg is <public gpg key>"?

Doesn't work if latest maintainer loses access to their private key or dies or anything like that though.