Currently we provide a fetch_remote_manifest feature flag, although it would make more sense if this were a configurable runtime setting, just like OCSP fetching.
Also related is that networking libraries will optionally be able to be excluded from compilation entirely with #1355.