v2.3

• only fetch checksum when we want to compare it
• us-east-1 is not a safe default, don't override env vars
• use go:generate to keep mocks updated, and out of binary
• build on go 1.16