[arch-dev-public] reminder - packagers untrusted