GSOC Proposal - OSTree: Drop privileges for HTTP fetches