You say &quot;it assumes your remote git repository may be malicious&quot;, but you don&#x27;t do anything to protect your users&#x27; metadata?<p><a href="http:&#x2F;&#x2F;www.6nelweb.com&#x2F;bio&#x2F;papers&#x2F;pwvault-ESORICS12-ext.pdf" rel="nofollow">http:&#x2F;&#x2F;www.6nelweb.com&#x2F;bio&#x2F;papers&#x2F;pwvault-ESORICS12-ext.pdf</a>