So if I control my pypi account and I control other places on the web where I can publish a back link, then a backlink checker could get a pretty strong signal that the same person is on both ends. If the other page is an identity signal e.g. https://keybase.io/matthewmartin
then I guess that is the best I could do without the keybase.io or pypi.org cooperating with each other.