Callers should not assume the layout of the oid structure; provide them
a macro that defines the null / zero sha1 object id.