change default for unknown sources & verify apps