in reply to Re^3: Where to store the "golden" copy of a CPAN distro? (on github)in thread Where to store the "golden" copy of a CPAN distro?
They'd need your private keys to sign anything. You should never give out your primary keys.