an experiment with signing/verifying cabal packages and an ad-hoc WoT infrastructure.