Hm, I wonder how the double sig problem that SAML would run into will work here. What happens if someone adds an extra sig object there?