cache fingerprints
fix fingerprint; switch down to sha256