daemon: Allow "signed bundles only" as security constrain