Metadata verification procedures do not explicitly say that the downloaded and verified metadata files MUST be saved

[tkfu]

I don't believe that anyone has actually used this loophole in an implementation, but technically we do not require that ECUs store timestamp, snapshot, and targets metadata after they validate it.