https://wiki.archlinux.org/index.php/Package_signing
Its been a bit of a headache for me, but that's mostly because I can't just blindly `pacman -Syu` through the update.