BLD: remove the renamed allow-insecure flag