Aha, but invalid SHAs were the reason, and apparently bootstrapping was using the old, unsafe access pattern