rsa.Key.verify doesn't need a sig in raw mode