changed --allow-external to --allow-unverified