So why else do we pay someone to package and certify/verify open source projects? This is absolutely 90++% of what should be RedHats core day job.