Althought that said it looks like the `emailOrHash` regex should be guaranteeing us a well-formed hash. Although the regex isn't anchored, which might be a problem?

I think theoretically we could drop this line but in practice it might help us debug.