remove (optional) architecture string from `uname -r`
download using https
don't check (potentially bogus) https certificate