Do we need securesystemslib?

[kenodegard]

What happened?

securesystemslib was only recently added to conda-forge and is not available on defaults. In other words, this feature has not been in use outside of development/testing.

Do we need to continue to offer this functionality?

[mohanavamsi20]

It can be usefull for future references or experiment.

[chenghlee]

It's "needed" for operations like signing the trust roots.

However, I'd argue that the trust metadata signing and management should be re-factored into a separate package/utility, and conda-content-trust be re-scoped to only be the client-side trust verification component. And in that case, securesystemslib shouldn't be needed as a dependency, as any other, trustworthy package that supports Ed25519 verification would work.