daemon: Let 'guix substitute' perform hash checks.