Experimenting whether you can use git commit hashes for security