On a more serious note, when the VP of engineering or CTO or somebody similar takes such a dreadfully ignorant approach, it's a very good indicator that somethi

On a more serious note, when the VP of engineering or CTO or somebody similar takes such a dreadfully ignorant approach, it's a very good indicator that something is more fundamentally wrong and to jump ship. Such a person should be at least capable of understanding the modern concept of how something like a .deb file is authenticated based on its hash from the public gpg keys for the debian package server in question, or the equivalent thereof for redhat/centos.