Actually sign & verify updates