flvdec: optionally trust the metadata