Ship an md5sum with signed builds