Problem:

When a user builds an ostree commit, it will be pushed to Pulp and distributed through an ostree repository. The URL to the repository will be shared with the user who started the build and will also be used in automated updated. Repositories will have to be protected so that access is granted only to the user that owns the repository.

Goal: 

IB will have to configure content guards on ostree repos based on user certificates.