rustup: allow the use of either sha256sum or shasum to verify the download hash