Allowing to verify downloads, but not install them makes no sense currently, so don't treat the two cases differently.