text: Signing all configs increases security - no need to trust caches and control planes. And common domain + key identity for all entities ( not only workloads) and some of the code can also be nice. Few other ends, won't fit here.