Needs to be encrypted with the REPO pub key!