Same question as on the signing PR. Should we block people from signing using other digest algorithms?