added SHA check for tarsnap

I think the recommended way to use vars these days is the {{var}} idiom rather than the ${var} idiom, so I used that.  And I used some extra carriage returns to make it easier to read.  Of course "recommended" and "easier" are subjective so feel free to reformat as you see fit.