Well, none of your fine suggestions worked for me, sadly, I must be misunderstanding something. What DID work was switching from an http://hostname to an https://hostname which meant that my firewall didn't understand that I was downloading packages with virus signatures in them. Blah!