0install with TUF