Free the thumbprint variable before returning
This is probably a false-positive because if we know that the
length of t is 0 then there is nothing to free, but it doesn't
hurt anything and quiets the static analyzers.
Discovered by Coverity
Signed-off-by: Rob Crittenden <rcritten@redhat.com>