Use a request body's fields only for signing