[opensuse-factory] how secure is the opensuse packagemanager