but how can you verify that the prebuilt binaries aren’t compromised?