Explicitly lock to sha1 with no support for other algorithms