Interesting idea. My initial response is that as a developer this sounds like a useful tool, but as a user I would be uncomfortable unless I personally knew and trusted the developer (regardless of gpg). Of course, my discomfort would depend on the nature of the system I was granting the developer access to.