I think something along the following lines would also work:  ``` go hashInput := authConfig.Username if authConfig.IdentityToken != "" {         hashInput = authConfig.IdentityToken } else if authConfig.RegistryToken != "" {         hashInput = authConfig.RegistryToken } return digest.FromBytes([]byte(hashInput)).String(), nil ```  It's still important to do the hashing, because we don't want to put bare tokens in the distribution metadata store. 