sfc: really check hash is valid before using it