playing more with changing ref scripts

update hash

some playing

ref script is the issue

Use latest version of threatmodel

Bump threat model version

Hook up to quickcheck-threatmodel

Fix nix

Add source dependency on quickcheck-threatmodel