https://major.io/2014/03/26/docker-trusted-builds-and-fedora-20/