mdownload(): support file:// uris to support file injections which the alx branch use with src-tarballs