The validate() signature changed in gofer 1.2.0 which now passes the original signed document.  This provides the *Authenticator* more information than just the destination uuid (which ended up being useless).  For pulp, this give the validation method access to the data round-tripped by pulp which is used to correlate asynchronous replies with task_id's and consumer_ids.  The consumer_id is used to query the DB for the consumer's RSA key used to validate the signature.