Avoid creating extra CryptoBackends when verifying signatures.

SecurityContext's verify_signature can call self.crypto... directly
instead of calling a function that creates another CryptoBackend
instance.