factor stream hashing out a little
stray console.log
support paranoid mode

this involved a rewrite to a more strategy-like pattern
1.1.0