BAC-1003: don't set SHA-1 headers for thumbnailers