[Haskell-cafe] Safe Haskell design question - package trust