Allow unauthenticated packages (for now)