Remove hard-coded MD5 wherever possible.

Doing so helps Salt to achieve FIPS compliance. Closes #11486 and #7318.