Trusted verification once moved to nodejs/ #1

Nothing personal obviously @canterberry, but this'll need an audit by a TSC member or someone with a trust relationship to the TSC if/once it's moved, to make sure the keys are as they should be.

Flagging that now in this issue which can be closed once it's all done.