Protecting Rust against supply chain attacks