rw.static switch to sha256 for file hashes
allow pathes for static sources