Never use the system's sha2 library - ours has a different API now.  Fixes #4217