I see that policy requires a shntool md5 to be included for non-FLAC files. That would be a good idea if a tool existed for easily confirming files based on the shntool md5, but afaik no such tool exists yet (and I've been waiting for a long time). So frankly I'm not sure why this is required.