Eek doesn't this create a security hole? Or are those diffs gpg encrypted?