more progress on checking signatures (but not there yet)