I wonder if you ever thought about out-of-the -box offline installer. I suppose servers in such a sensitive data shouldn’t have any access to internet. This is also my case and we ( with sys admins) spent a lot of time to create some temporary tunnels, rules on firewall etc. etc. to download necessary files. In my case it is not critical because my installation has not been in a production yet ( keep finger crossed to promote it on production soon!) but in any future cases I will need to repeat all this complicated tasks again to upgrade it to latest version.