require explicit sha keyword, add testcase
Merge pull request #777 from duckduckgo/dylan/FixOverzealousSha

require explicit sha keyword, add testcase