[masklinn]

Having different services trust different (and unrelated) bits of the request is an immortal classic though, great stuff.

[rbanffy]

The part that made sure the user could update the package could have at least check if the payload is about that package before passing it to the service that trusted it.