For all the crap Canonical gets about snaps, these are kinda trivial with snapd. snap download will download a snap and its related assertion, you can install unsigned snaps with --dangerous, and you can add trusted certificates to snapd with a single command.