use direct sql for checksum, as there are no identity xrefs for those