I think the goal was to be able to retrieve (and verify the signature for) the headers separately from the payload.