use new `:allow_untrusted` modifier on soundflower

This PR must be held back until the next release, as it uses a new addition to the DSL.