make it harder to create supplemental packages by accident, #20689