Protection against partially downloaded tarball

A little rough, but it’s safest way I can think of at the moment