accept different schemes ($2b$ for example)
fix leak in ftsi_bc_verify()