pkg/tarsum: review cleanup

Signed-off-by: Vincent Batts <vbatts@redhat.com>