Add --allow-unauthenticated to pkg installation options