[Proposal] Securing orphaned AUR packages and maintainer voting