Since the v4.0.0 tag cannot be removed from the goproxy service, we
added a retraction directive so users do not accidentally use v4.0.0
tag.