This breaks the XPK package install, the package id should be generated from public key, not from the unpacked_dir, the result of it will cause installing a package duplicate with different id.