dersig & strictenc: get the checks (& their timing) correct.
strictenc, low_s, & dersig flags.