allow strict access of public packages as well as private ones

- it would be great if there was an attribute called `strict_access` that would allow more control over public packages hosted on private sinopia servers as well.