use or instead to not fall through
when promoting a byte to short, throw away sign
only allow the import function if pw3 is validated
bump Yubico copyright to 2013