Make repository trusted until we can get package signing in place