Tim Lytle

Probably good to validate + output the decoded header / body. Especially for cases where a call is rejected, and you want to make sure the right `subject`, `applciation_id`, etc...

Seems like the check should be the othe way - only allow install if there _is_ a lock file. Otherwise it should be an update (since running `composer install` without...

We'd also find it useful if this worked for _every_ email and not just the public email.

@mboudreau sorry for dropping this. Yeah, just on their own github account. So our org has a repo (company/our_app) and as I work on it I push to my fork...