Stricter pin validation