We'd have to deal a bit with key management, but companies like Red Hat seem to have that licked. (Downloads through up2date are all signed and Red Hat's key is automatically installed at setup time.)