Makefile: add DC_SHA1 knob