I realize this isn't something you changed, but already existed. But question: is there any reason we wouldn't _always_ want to perform a verified download instead of an unverified download? In other words, can we merge these two functions together?