Now that we use download_file.py anyway, move the unsign part to it. Change-Id: I139fae87bbe263ac42e75d4706fa28059a53e326