add a protect against forgery mechanism in the push package generation