[rbut]

How will this affect those running MicroG? Is it as simple as implementing that API and returning "trustworthy", or is there some kind of signing going on that will make it harder?