Rely on SHA 1.6.3.

This package needed an incremental interface which was merged in SHA at version
1.6.3.