Do not require crypto_sign_BYTES extra bytes for the message in crypto_sign_open()
This is a common source of confusion.