This is purely editorial, but: Could we please s/sign/mac/g ?  MAC is different from signing.