do not specify Digest::SHA as a prereq
warn if SHA sums cannot be checked