A duplex stream for receiving a package tarball, verifying arbitrary checks, and emitting that same tarball on success.