Change to curl for keydownload because it honors certs