have the sha256 grep fail when there's no match