stubbing out the md5 package
now we have the md5 drop-in
extra comment
for clarity sake, don't overload the name 'hash'