Add note about signature validation