If you use `git clone`, doesn't it do key-checking as part of the commit tree verification process? That's how I got my latest copy of youtube-dl...

—Arlo