(this might not be the right Release Note type, for the change itself is a workaround to another component misbehaving) Cause: rpm-sequoia currently fails verification of a package unless each and every signature algorithm is trusted Consequence: once we start signing RPMs with PQ algorithms, hosts which have them disabled won't be able to install RPMs Workaround: we've hardcoded PQ algorithms on for rpm-sequoia on crypto-policies level Result: PQ algorithms will be enabled for rpm-sequoia regardless of crypto-policies Note also: at some point in the future the change will be reverted, so if one is using custom (sub)policies and wants the algorithms trusted, they should enable them in their custom (sub)policy nonetheless to ensure a smooth future transition