* Don't allow removal of (Ed)DSA keys for pre-validated updates (delta updates, .aar updates) * Don't allow removal of code signing identity in new update (at minimum, an adhoc signature can be used)
