security: In doc comments for sign operations, don't tell the caller to set the timestamp because it is deprecated.