Creating a private distribution point and private issue tracker definitely would be an option, and it would make enforcement much easier. But I believe it would also make us more distant from the community. I really wanted to create a system where the Open Source project can stay the same and be sustainable at the same time.