Actually, while at it we should just as well validate it is lower-case hex.