Spark's entire trust model is based on the fact that all keys used to sign previous transactions are deleted.
Problem is, it's not possible to prove without a doubt that someone deleted a key, so you need to trust Spark that they really deleted the keys.
If trust is involved, it's not trustless.
