Although this is true, it might cause you to think that a signature is tied to the current user session.
Maybe we should make it clear in the function's jsdoc's description that a signature can be re-used by another (anonymous) user?