Use attributes to set --allow-external and --allow-unverified