It's pretty scary how often Pacman complains about invalidly signed packages -- very likely my binaries used to just get silently corrupted.