This might move files into the forensic haven a bit too aggressively. Networking errors (e.g. 'curl_easy_perform not CURL_OK') can be debugged from good logging; having the file content probably wouldn't be all that helpful.