avoid using sha1_to_hex output as printf format