Instead of calling this a `signer`, please call it a `requestAuthenticator`.  Some HTTP Authentication schemes don't require digital signatures at all, so the current name is misleading.