Comment 10 for bug 1860456

> a flag such as `--no-verify-checksums` sounds a very bad idea

btw we don't verify checksums for any downloaded binaries, but it's probably a good idea to do so:
https://code.launchpad.net/~ddstreet/ubuntu-dev-tools/+git/ubuntu-dev-tools/+merge/377952