remove insecure and autopublish packages.  still pushing all collections but we can limit it as needed