moved signed above encrypted in the email templates, because it's easier to teach sigs before encryption