Don't leak the key by outputting the download URL