They should. And sort of already do. Though, I wonder how difficult it is to register with some certificate issuers under a fraudulent name.