Thanks for looking deep into it. 
Note that the reasoning validating "only" against the hex format is that our data in NSDB has tenant data in that format, i.e. OS integration layer creates resources with that format. 
So 32-char hex string is only valid tenant format  in our system if used with OpenStack integration.