disable package verifier and allow package install from unknown sources