hash_store: do not sign reply