Sort the requirements: if the user specifies them in a different order,
the hash should be identical.