adds TODO regarding validating package configs
adds TODO regarding validating package configs

mark-in/securedrop-prov-upstream,mark-in/securedrop-prov-upstream,mark-in/securedrop-prov-upstream,mark-in/securedrop-prov-upstream