remove trust-policy on bundle install