My suggestion: Add a way to set header values in url() in downloadPlugins {}. It enabled to download plugins which needs authorization, which is useful for servers with custom closed source plugins.