need an extra raw-token
tests for download_lockfile
use our version... it actually works
show failed