rockspec: using md5 from uploaded tarball