[releng] Issue #8454: How do we make sure signed packages don't get garbage collected?