switching to sha1-root, cc @jonnybarnes