emacs-install has better download and verify signature handling