Refresh cosmetic carriers if needed from the API in a MD5-hashed UUID set and then call out done. It will only refresh when the REFRESH_DELAY has passed or when force is true.