OK, but what about sha's you get from others? Someone references a sha in an email, or on IRC, or you find a reference to something in a bug report, or a gitweb search..