Move verification logic to function, use single "signatures" key