Fix: in case CHECKSUMS.md5 was not found, and slacker wants
to download it, properly handle GPGCHECK: it can be turned off
by get_file, which mk_chksum did not check for.