Merge changes I49329e62,I64197ebe into main

* changes:
  Modify logic to compute trustedSource
  Dont check for "no_install_unknown_sources" for installs from privileged sources.