Function install 

pub fn install(
    pkg: &Path,
    root: &Path,
    trusted: &[VerifyingKey],
) -> Result<Installed, String>

Verify, then copy into <root>/<name>/<version> (atomic rename). An existing identical version is replaced only after the new copy verified.