If --allow-unverified is used assume it also means --allow-external
Merge pull request #1457 from dstufft/dont-require-external-and-unverified

If --allow-unverified is used assume it also means --allow-external