Bug#704180: Use p11-kit to replace nssckbi

[Daniel Kahn Gillmor]

On Fri 2019-01-11 18:17:26 +0100, Laurent Bigonville wrote:
> The problem is what/who will decide if this package is installed? If 
> that package is being pulled by on other package for some reason, that 
> means that the local administrator will not be able to revert the 
> decision of the package maintainer who has added this dependency

agreed, a runtime dependency on that for anything but a "preferred
system configuration"-style metapackage would be a bad thing.  but it'd
also be a very visible thing.

Hopefully if that happend, the affected user could report a bug on that
dependency, and in the meantime work around it with something like
equivs.

        --dkg