(jr) A new command ``bzr verify-signatures`` has been added to check that commits are correctly signed with trusted keys by GPG. This requires python-gpgme to be installed. ``bzr log`` has gained a ``--signatures`` option to list the validity of signatures for each commit. New config options ``acceptable_keys`` and ``validate_signatures_in_log`` can be set to control options to these commands. (Jonathan Riddell)