Unsure if we want to expose hashes here or not.  I imagine the blob store will have at least 1 checksum, but that it only needs this to verify integrity.

I expect at a higher-level we'll capture other checksums (sha1, sha256, sha512, etc) but this will likely be done before and outside of the blob store.