Make Signature protection policy validation more robust