- i_resp_previously, previously should include which tags ?
replay prevention all of them
- rpush negotiation for which tag to sign
- - big comment in dgit-repos-server (search for `we are updating only')
- - dgit-repos-server readupdates tag regexp
- test suite tests/lib
- many actual tests