Use requests to download MSIs over https, drop GPG validation.

Closes gh-15