Ensure SRI by providing a hash for the external JS. See: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity