This is the intelligent non-invasive way to implement this. Basically using a similar cryptographic signing scheme as SSL certificates. We've known how to do this for decades.