* Secure sysvars under hash by freezing all strictly * Fix hash's non-idempotnet and add new test * Clean up * More cleanups