fix(ffi): check that our own device is cross-signed before responding to incoming user verification requests#4650