If we want to install an atomic host via anaconda we currently don't have any good way of telling it where the keyfile is using the ostreesetup line that is supported by anaconda. We need to enhance anaconda so that we can provide this information to ostree and enable commit verification.
See related issue in anaconda that is an RFE for a feature that would help us enable this.
We would also need to verify the keyfiles are installed in the media and can be used during install.
to comment on this ticket.