Merge remote-tracking branch 'upstream/master'
Refactor client.updater, removing verification from download.py.
Merge https://github.com/zanefisher/tuf into refactor-download-update
Merge branch 'refactor-download-update' of https://github.com/zanefisher/tuf into refactor-download-update
Merge with updater/download refactoring from @zanefisher.

Update download unit test to work after refactoring, but it is a little
incomplete (in particular, the unsafe_download function needs more testing).