Base64 checks time, RSA not yet.
Checks signature, but one keypair hardcoded.
Checks with database key, nothing hardcoded.
Signature removed from PendingMessages.