Making archives/mirrors that can be trusted as real is hard. what can we do to help non-tech people verify mirrors and archives?