An alternative to (the highly insecure) `curl '...' | sh`