it is not "explicit", it is just "id" or "app_id" and it should be the first arg, like Update("what to update", "from where") and it should give an error if package does not correspond to the given app id.