add optional RFC1701-style checksums to composites