Add 'md5sum' option

This adds a new `md5sum` option which, when set, forces a checksum validation of the downloaded tarball.