Fortunately the hash is the same, so I don't really need to check authenticity. Uncovered by c3255fe8ec.
This is a FUSE-based 9p client.