Stream decryption to avoid extra copy of potentially huge OS package
Stream the decryption of the downloaded OS package to avoid materializing yet another representation of the OS package. The main benefit is reduced memory use.
This is a follow up to MR Decrypt ospkg which introduced decryption of the downloaded OS package, and this change was suggested here: !241 (comment 22086).