Has anyone tried to incorporate signed executable loader into the Linux kernel ?

Hopefully letsencrypt can start certifying code signing keybase keys.

Also would be nice if someone would offer a service to build executables from open source code and code sign certifying that a particular executable was built from a particular source openly available.