If you want file downloaded (without the option to open it), Content-type: application/octet-stream is enough.
Didn't know that. If I want download, I use octet-stream. If I want opening, I use proper type. In that case, downloads can be handled by right-click and "Save Link as". :-)