s3: separate tdb validation code out into its own source file