[Distutils] Proposal: drop md5 for sha256