Closed the user_signature loophole.