allow unverified source to install PIL