How are they breaking apt? Aren’t signatures checked only on the package itself?