Tar checksum on `extract`

After #140 merges, we'll have the checksum for the entire tar (not just the files in it). However, it still won't check for checksum mismatches. One possibility is to do that check as part of `extract` if a user is extracting all files in a tar. (If they're not extracting all files, then we can't compute the checksum of the entire tar).