- - i_resp_previously, previously should include which tags ?
- replay prevention all of them
- - rpush negotiation for which tag to sign
- - big comment in dgit-repos-server (search for `we are updating only')
- - dgit-repos-server readupdates tag regexp
- - test suite tests/lib
- - many actual tests