consider recipes with :checksum as "secure"