Add --secure-source options

This option can override the insecure sources check against http:// and
git:// sources. It allows specific url prefixes (such as an internal git
mirror) to be excluded from the check.