sha256:allowed
md5:rejected
