Could we start a convention for modders and releasers to use the same signing key?

Pros: ease installing updates, easier to troubleshoot any mods, less likely to be traced back to you.

Cons: you could argue security, but it's not like your users will check if keys match. Only useful if adoption is widespread.