Which extended attributes are attached to downloaded archives and apps? How do they fit in with provenance tracking?
