Fetch Hex with wget or curl

This way we can use https and do peer verification without bundling
certificates with elixir.
I'd use `&&` just because the second arg is not guaranteed to be a bool.