[Fedora-packaging] Re: The authenticity of pkgs.fedoraproject.org