If you're using a variant of Unix for the web server, you can delete the file as soon as the download is initiated. The OS won't fully delete the file as long as a process has it open. (Of course, resuming the download will not work.)