How else would you propose they give any level assurance that it's real users signing them?