Ok, my thoughts:
Set up a mirror system. That way, mirror access is always provided, to select users who are given the mirror username and password. If the mirrors download it (possibly on a T1 or greater), then those can host per their own rules. And we get more, and more, and more, and...