Changes from pkg 1.9
- Fix fd leak on systems without utimensat (merged in release branch)
- Do not use openssl for sha256
Changes from pkg 1.8
- Drop privileges in many commands