Re: [master 2/2] Actually verify downloaded packages