You probably want to split these up in to 2 separate config vars.
You do gain some minor obfuscation security from not sending these, but even if the hash isn't sent a typical game would probably want to send the version so the client can tell the user to update/tell it how out of date it is.