Do not allow fallback from a authenticated repository to a unauthenticated

If a repository was signed before and is no longer signed, stop the
update for the repository and revert to the last known good state.