api: protect against misuse via zeroing out wc
blob: more checks to eblob_csum_ok()