add allow functions when insecure package is in use; fixes #18
bump version