Thinking about this more I realized we won't have a Response object before we sign (if we did we'd have messed up the OAuth flow) so I'm not sure we can pass it in here. Unfortunately, this is one thing that was nice about the hook infrastructure: we had a full Request object to manipulate. We could pass it into the signing logic and such. Here we don't have a Request object anymore, we're one step away from creating one.