req: Customer signature for key deletion(s) during decommissioning(s) and maximum wait period

[badra001]

This I think is part of #13. We might want a signed commit (gpg) to remove a bucket/key. If there is a wait period, this may be a bit tricky to tie into a single module.