use --verify-downloads for now