This allows composer installs to function even if the installer checksum
changes, and doesn't force us to update the formula whenever their
installer changes.
We can do this now as composer upstream provides the checksum on
https://composer.github.io/installer.sig since 2016-04-28.