Comment 4 for bug 820638

That (fail unless checked) is appropriate. That's the default for apt.