this includes the protection flags plus an optional comment field doesn't it defeat the purpose of hashing