evil people in between logging payment hashes could be an issue, but we will fix this with ptlcs