Sign then Encrypt

Ok. Hopefully this addresses all the past feedback. I tried to simplify the PR and still get what we need in. This one is also a prerequisite for #840 as mentioned below. @Renelvon @gubatron take a look.
This can be critical in debugging. I can put the debug where it's called, but sometimes the contracts get wacky and it's beneficial to see if at least it was verified.