[Fedora-packaging] The authenticity of pkgs.fedoraproject.org