Make SignatureEngine.box be more comptible with keybase-style sigs (when they hit)