TagForPayload and TagForJob really belong in the registry package. These prefixes mean nothing to the signing package.