Add comment saying what's up with the RSA-SHA