Further refinements to signed auth methods