Add notice to docs that only sha1 is currently supported