require explicit sha keyword, add testcase