Commits not pushed with a user's public key could be marked as unverified in the web UI until the logged-in user verifies ownership.