Providers usually don't include the `Content-Disposition` header, but today I ran across one that does.
One difference with the Content-DIsposition header is that it includes the file name for the file that they want to use, versus having the file name in the URL.
The difference confused a tech here, but doesn't seem like it's going to gum up our automation.
Yet, just to keep things simpler and consistent, it seems worth considering recommending against using this header. Alternately, if it's intended to be supported, it could be worth mentioning in the spec.