$file object:
Download the file
Fetchdownload_url once, with no Authorization header:
sha256 to confirm they are complete.
A download that breaks off before its last byte may start again until expires_at. An undownloaded file is erased after 30 minutes.