It looks like doing it this way allows us to elide the AlreadyFinalized checks since they're present on `Hash`. That's a nice reduction of duplication. Probably worth doing on the RSA and DSA contexts as well.