Clear Signing: Don't Trust, Verify