path needs to be signed for a unique hash