2009e changes: consider MD5 signatures insecure.