global USE flag
verify-provenance

Verify provenance of PyPI distfiles (verifies that the artifact comes from upstream source repository)