Especially in respect to a SignedApplet (and a ProjectSignature?), we should eventually try to join with opponents like Eteria (EIRC) to get an applet signature by letting SourceForge users fund for a Thawte? certificate.