add --force-yes to install unauthenticated package