Further DoS prevention: Verify signatures last