Should this comment be removed? Is there a `/rsa-wrong-public.pem` that should be removed too?