Remove outdated TODO: we already check for hash

Maarten and tests confirm.

Change-Id: I10ba612d5488893a6f3145623022b481e7c1976d