The signing and verification all needs to be off by default. If signing is explicitly set to on, verification should default to on.