Honestly, it probably needs to be roped into something like the certificate authority system. Like, if you have a deceptive licensing agreement, the certificate is revoked. And similarly, being asked to sign something that isn't tied to a certificate would be a huge red flag.