Tell users to use shasum/sha1sum to generate sha-1 hash

... instead of doing it the "janky" way.