The previously maintained list of tarballs didn't make sense because we
allowed downloads anyways. Instead, we allow all tarballs in the
orig.tar.gz and disable downloads from inside the container.

Change-Id: I949001e4e3d5f81f23b68d0aa41abd3fa801065a