[backend] add slepool saftey mechanism

We don't want to have overwrites if multiple packages are
published by mistake...