The pattern is to always call the derived methods for ValidateXYZ.
Also, if there is a signature, it should be checked.