As far as I could tell from the commits, we've *always* been using strict encoding, but not decoding. I couldn't find the reason behind not decoding strictly though. This PR just adds another check over data signing.