yeah, really as soon as the release is cut and the signed binaries are in s3, we can work them through the notary autoupdate infrastructure