ncm-download: Force Net::SSL with LWP

Required to support the certificate HTTPS_ env variables (same as with ccm-fetch)
This affects other components as well. It should be in `local` scope.

Also, what's the reason to disable hostname verification?