agree, the hash is internal, and imho, should not be exposed at all
(remember that yaml vulnerability?)