Add section explaining how package managers establish the initial trust on root keys and discuss solutions for PyPI projects hosted externally
Add section explaining how package managers establish the initial trust on root keys and discuss solutions for PyPI projects hosted externally

theupdateframework/pep-on-pypi-with-tuf