"It is recommended that the value of (SHA-1 hashes) be protected as if they were plaintext. (Sec 5.2)" Why?