update: Add notice about missing Signed-By in deb822 sources

We want to gently steer users towards having Signed-By for each
source such that we can retire a shared keyring across sources
which improves resilience against configuration issues and
incompetent malicious actors.

1 files changed, 1 insertions, 0 deletions

diff --git a/doc/examples/configure-index b/doc/examples/configure-index
index d220a814f..6a168192c 100644
--- a/doc/examples/configure-index
+++ b/doc/examples/configure-index
@@ -130,6 +130,7 @@ APT
         {
            APTAuth "<BOOL>";
            NonFreeFirmware "<BOOL>";
+           SignedBy "<BOOL>";
         };
      };
   };