signature verification works as long as you have configured the log's public key