Secrets digest algorithm

If I understood what Thomas wrote here correctly, Fly might even get rid of the digests (authenticator tag as Thomas puts it) altogether. So, it is no surprise they’ve moved away from MD5 (which may not be the best choice for a digest, anyway).