Never use the system's sha2 library - ours has a different API now.  Fixes #4217
Cpplint.py: While using a reference, space before & is unnecessary
Use std::unique_ptr