Sign the input message, not the whole sealed noun