Always add SignatureListener, even on NullCredential requests