commit: check committer identity more strictly