switch to sha1s that work