Allowing vulnerable packages on DragonFly