It does not show up directly in the source repo (and won't be included in a
checkout), but you can use it to trick somebody into believing a commit is
authentic.