Patch Download should be optionally done by the site server
To make automatic deployment rules work site servers in enterprise environments needs proxy and firewall exceptions. So site servers should be able to download software updates. But in remote console sessions the console users also need proxy permissions because the downloads are done in context of the console users and for their workstations firewall exceptions need to be defined. This makes it unimpossible to run the console on a secured Workstation by an administrator account that can not access the internet. It would be usefull if we had the option to choose who downloads the patches. In example "use my account to download the patches", "Use proxy account to download" or "Let the site server download".