clean up gitignores
(everything uses xz lately)
download patches over SSL
(md5sums protect from MITM, but we avoid surveillance on principle!)