ttl.sh and cosign: Signing an anonymous & ephemeral Docker image registry.