8.21. sha1 no longer accepted for secure boot

FIT images using sha1 are no longer accepted as secure boot images. sha1 has been proven insecure in 2017.