Respect --prefer-insecure while updating (closes #15497)