improve wording of unauthenticated repo warning (thanks to Jakub Wilk)