It is impossible to set hash_function in PHP on FreeBSD due to session
and hash extensions being built as modules. This means any application
that is defining hash_function to something more robust than MD5 is
failing to do so and PHP on FreeBSD is automatically using MD5 anyway.
This is a security issue we need to resolve.