Comment 11 for bug 1978066

Thanks for the security review. This leads to an interesting situation, as the reverse-depends are already in main and the component-mismatch exists.

@vorlon suggested that we should patch out the jigit parts, in order to be able to drop that dependency, as jigdo isn't used widely.