security (minor): In signWithSha256, correct the doc comment.