use new `:allow_untrusted` modifier on soundflower

**This PR must be held back until the next release, as it uses a new addition to the DSL.**