There may be several signatures stored for a given payload, right?