changing md5 to sha1, opssec says md5 is compromised, sha1 is better