remove insecure and autopublish from meteor packages