drop strcpy in favor of raw sha1_to_hex