Be more permissive of fingerprint length, since this can come from mobile clients too.