remove 'insecure' package