Use scmp for constant-time string comparisons.

This minimizes vulnerability against timing attacks.