Add hardened_hash, prevents adversarial inputs