Use SHA-pinning