Default to disabled insecure downloads