coverity-submit: use md5 (given upstream)