exception details optional.
log signing/validation exceptions at INFO.
sign/validate SHA256 digest instead of message itself.
factor out pre-processing of the incoming message.