Allow users to add checksum. The remote_file resource keeps pulling the files on every request without a check.
Add some default sha256 for current files.