Elefant updates now verified via checksums stored in a separate repo under a separate account