is_valid_mac -> &_for_db

This is a more semantically correct since legitimate MAC addresses can
(correctly) return False.