I think disable sig for all is much easier and fair solution, changing this and that probably can introduce bugs into the system and probably can lead to unknown catastrophic vulnerability. This is not a place to make money and everyone should go by the same rule.