For now this is a per package responsibility. It can be very easily overlooked and a potential user has no idea. Is it possible to analyze the system image and tell if there are any paths pointing to the build machine?