do reinstall binaries if their hash is not the expected

Closes: #5759

For this to work, the bundle needs to call::
``python setup.py hash_binaries`` during the bundling process, so that
the right hash gets updated in the bitmask/_binaries.py file.
Hm, may be we should just log the error and return? Worse case, we don't update the binary.