Duplicate metadata can only happen if someone tampers with the phar, so we can and should treat that as error.