don't trigger leakdb w/o a hash or pass