signed push: fortify against replay attacks