Work in progress: switch to ar(1) wrapper for package.tar.xz, similar to the way Debian packages files in dpkg.