Add :allow-unsigned to the package action doc string