This will help avoid flakes when initializing WORKSPACE, since there are two sources for each file. Any errors downloading or failed hashes cause bazel to try the next url in the series.