> ATM lots of packages don't go the extra mile of generating a cert. I would > think having secure-by-default would be good. Ok, I'll work on this over the next few days, including the GAR integration/documentation. Thanks -Ben