Show unauthenticated warning for source packages as well