In the `SignedSerializer`, not the `CookieProfile`. And again anything the `SignedSerializer` raises should be a subclass of `ValueError`.