I think this is the data/payload argument that lets the callback retrieve its context, rather than the data to sign. The callback gets passed two buffers. One is the key data, the other the challenge data (though why it's a `void**` is still a mystery).