cot: give some context for the untrusted zips