Make it more clear that signing should be done on the hash of a message rather than on a message directly.