Allow setting --allow-external and --allow-unverified