optimize imports
verify known hash algorithm
verify that validate fails on unreadable file
more

note this makes test_carriage_return_manifest to fail, because
checksumming tries to read data/newline%0D file
previously it wasn't a problem as the error was hidden due to
empty f_hashes after BagValidationError