You don't use FMA (or any multiplication) for SHA2.
The throttling is a big issue.
Did you guys get to test Epyc at CloudFlare?
The 7401P seems pretty special. Like really great $ per perf. I think SuperMicro are coming out with 1 socket Epyc boards/servers.