#84573404 handles signer roles, policy and signing location correctly