Mark md5 usages for cache/id as usedforsecurity=False (FIPS requirement)