Re[2]: hackage, cabal-get, and security