Warn if client is using the default repo, which is insecure.