More validation for push_eth() and other actions

Triggered by Jesse's review (comment #2)