Added a couple of message signature checks where it was still TODO (and
might have led to a crash if the wrong signature was sent). Also removed
some cases where two different signature types were accepted for API
compatibility reasons--the old API is no longer used.