#403 disabled dtd download by default

IMO it should default to ```false``` by default. Most people might not be aware that go-server will be initiating an outgoing connection because of their test-artifacts. We could post it in the *release notes* indicating the change in behaviour though.