Returning 0 means we invalidate the sig, correct? We were going to warn but not error out.