PEP XXX - Surviving a Compromise of PyPI: The Maximum Security Model