Now that "molly-guard" has hooks, this feature could be implemented by having apt drop in a small script in /etc/molly-guard/run.d/ Francois