Align with stricter restrictions from Kirkstone when no SRCPV is used.
However, using fixed hashes is the much prefered way because tags can be
floating depending on upstream.