SHA1, cloudbleed and now AWS?