Prerequisites & vetoes -- improving packaging security

Thanks for taking the time to make detailed responses.

Plain text password issue: https://github.com/pypa/packaging.python.org/issues/297