I wonder if we should take html into account for the hash generation.
If we're going to put images with signatures in there, those signature nonces might trigger a change in the hash.