More fixup around SCR. Add sample config. Remove the whole section on checksum verify. It is what we have on by default now so don't call it out; only confuses