base-files: allow skipping of hash verification