each of these is verified: the current sha1 and the new sha256 are both correct for the given download.
Adding a cask for mosh (http://mosh.mit.edu/)