The "fossil md5sum" segfault has already been fix by
check-in [52199a504a9c7c20].

I think we want to continue to run with assert()s enabled.
This gives better visibility to mistaken assumptions in the code.