so signing a message was not enough?