Consider support .sum files for security purposes.

[bwplotka]

As per https://blog.golang.org/modules2019#TOC_5. sums can be important.

[codefromthecrypt]

I presume you mean checking these in, right? It can also be good for caching I think.