YT - make sure to "return" decrypted sig